Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
File:                     Q30oDLTq6BVqd9_no__F_UtNv6o.cer (raw, json)
Hash identifier:          Pvk2jPZCrQFG4/MheWTTXQ2hVDJ+xnnthBK/XgMwvpg=
Subject key identifier:   43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942445614BE45750EA002651BC58E1A0BD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203900
                          IP: 193.104.29.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:61:4b:e4:57:50:ea:00:26:51:bc:58:e1:a0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:84:01:45:7c:a8:e2:11:ee:fd:a2:18:4d:2a:
                    cc:7d:36:3d:a8:d9:e1:27:93:2c:42:be:f5:33:80:
                    a4:4d:a8:93:40:ff:d4:f7:a6:b7:ff:5c:d7:00:87:
                    12:c3:c5:e0:15:62:34:8a:18:74:d3:03:70:cb:cb:
                    bf:e4:2b:fa:ba:e7:d8:2e:f2:36:01:88:a3:6e:1a:
                    c1:d3:7a:d9:fb:8f:69:30:8e:eb:f8:d8:da:43:6a:
                    6e:63:60:d9:11:4d:0a:ed:30:56:ac:da:b0:4d:9b:
                    80:b6:d0:cf:11:b5:b3:ed:bb:35:28:5f:35:0f:68:
                    ce:fd:41:0c:5d:fa:99:ce:7b:2d:5e:9e:7e:db:74:
                    78:5a:bb:82:38:3e:f2:a5:e6:2c:33:2c:fe:dc:2a:
                    f7:b5:d6:c3:a9:54:00:b4:c7:dc:34:04:b8:83:69:
                    b2:3e:d0:73:3a:8f:5c:77:91:0d:ac:e6:26:c9:d9:
                    29:aa:80:e3:59:7c:15:24:6a:84:39:e1:f1:c8:22:
                    61:93:7a:eb:2e:c4:f0:42:61:0d:c5:4d:26:87:59:
                    23:98:36:69:17:6d:9f:a1:76:8b:b2:98:84:c7:0f:
                    53:bb:ff:a5:ac:a3:2d:58:aa:42:3f:f8:55:a0:6c:
                    17:32:51:ad:34:43:2e:02:bd:7f:62:5e:44:76:6c:
                    a8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.29.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203900

    Signature Algorithm: sha256WithRSAEncryption
         a8:3e:07:d2:1e:47:b0:9e:0f:d8:f4:a8:d5:cc:3c:02:b7:70:
         31:69:1e:11:67:5e:4c:ad:c9:3b:4c:ac:58:78:a3:58:a2:ff:
         55:f3:9b:d4:73:27:c0:11:ae:58:48:98:2d:d2:80:26:cc:74:
         98:86:aa:38:ca:ed:9e:c2:99:bf:a0:75:85:3c:03:0d:d6:33:
         28:15:6f:39:f2:de:92:5f:e1:d9:5b:24:05:09:27:b8:0a:6d:
         e0:e6:0e:b9:fe:9b:1d:95:10:ec:51:0c:76:6a:a5:1f:1e:f6:
         37:95:10:da:e1:b3:2b:3a:a2:99:c7:6f:8e:f6:80:96:c2:0a:
         e2:10:ae:a2:c2:50:04:fc:1e:1b:35:35:a0:fd:b2:00:2a:58:
         1c:c8:93:ef:d7:8c:c3:d8:16:39:bf:32:f7:11:01:d2:e6:28:
         42:b2:0e:f0:92:1d:a9:5a:1e:be:47:fa:5e:d3:8a:b8:cb:39:
         b4:f4:e0:37:41:fc:dc:99:6b:ef:9a:d4:51:54:c9:a3:29:63:
         ef:24:32:c2:20:f0:df:3e:e2:96:09:66:61:a2:d6:bb:9d:b6:
         80:1c:ec:64:c5:2d:dc:63:24:f5:76:e2:36:28:40:e8:d0:cc:
         5e:60:ba:20:d6:cd:e6:8d:7c:3b:40:c1:33:af:60:c9:4c:4e:
         49:4f:64:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:45:11 2025 by rpki-client